REMARKS 

Claims 1-22 are pending in the application. In the Office Action mailed June 18, 2004, 
Claims 2, 7, and 10 were objected to; Claims 8, 9, 11 5 13, 15, 17-19, 21, and 22 were rejected 
under 35 U.S.C. § 112 as indefinite; and Claims 1-22 were rejected under 35 U.S.C. § 103(a) as 
obvious. Accordingly, Claims 1-3, 6, 8-11, 13, 15, 17-19 and 21 have been amended; Claim 7 
and 22 have been canceled; and Claims 23-26 have been added. In view of the remarks set forth 
below, applicants respectfully request reconsideration and submit that Claims 1-6, 8-21, 
and 23-26 are now in condition for allowance. 
Claim Objections 

Claims 2, 7, and 10 have been objected to. Claim 7 is objected to under 37 C.F.R. 
§ 1.75(c) as being an improper multiple dependent claim. Applicants have canceled Claim 7 and 
replaced it with new Claim 25. Applicants submit that new Claim 25 is a proper multiple 
dependent claim. 

Claim 2 is objected to because of an informality regarding the word "creations," and 
Claim 10 is objected to because of an informality regarding the word "either." Applicants have 
amended Claims 2 and 10 to address the informalities and submit that the amended claims are 
now in condition for allowance. 
Claim Rejections Under 35 U.S.C. § 1 12 

Claims 8, 9, 11, 13, 15, 17-19, 21, and 22 have been rejected under 35 U.S.C. § 112 as 
indefinite because the claims include the phrase "additional processing," which the Office Action 
states is an element not actually disclosed. Applicants respectfully submit that the element 
"additional processing" is disclosed at page 3, lines 14-19, of the specification: 

When the alteration detection means detect an altered or deleted log file, 
as means are provided which perform additional processing, additional processing 
can be performed automatically, when alteration or deletion of any of the log files 
is detected. This additional processing may include, for example, notifying a 
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system administrator of the detected alteration, or printing out all of the current 
log information on paper. 

For this reason, applicants respectfully request withdrawal of the claim rejections for 
indefiniteness. 

Claim Rejections Under 35 U.S.C. § 103 

Claims 1-6 and 8-21 stand rejected under 35 U.S.C. § 103(a) as being unpatentable as 
obvious over U.S. Patent No. 6,611,850, issued to Shen, in view of U.S. Patent No. 5,713,008, 
issued to Falkner. For the following reasons, applicants traverse this rejection. 

The Office Action cites the Shen reference as teaching a file protection system for 
protecting files in which computer system operations have been recorded, including file creation 
means which create a plurality of identical files; alteration detection means which periodically 
monitor the files for alteration or detection; and restoration means which restore the altered or 
deleted log file from another file when an altered or deleted file is detected by the alteration 
detection means. The Office Action admits that Shen does not describe the creation of log files 
to record the operations of a computer system. 

The Office Action cites the Falkner reference as teaching the generation and storage of 
log files to monitor computer transactions. The Office Action states that it would have been 
obvious at the time the applicants' invention was made to use the file protection system of Shen 
to protect against deletion or modification of log files by providing backup copies of the log 
files. 

Applicants respectfully submit that a prima facie case of obviousness has not been 
established for Claim 1, as presently amended, and that dependent Claims 2-6 and 8-21 should 
also be allowable. 

Three basic criteria are necessary to establish a prima facie case of obviousness: (1) the 
prior art references must teach or suggest all of the claim limitations; (2) there must be some 
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suggestion or motivation, either in the references or in the knowledge of one skilled in the art, to 
modify the reference or to combine the referenced teachings; and (3) there must be a reasonable 
expectation of success. 

The embodiments of the present invention are generally directed to a log file protection 
system that prevents intruders from deleting or altering server computer log information, and 
thus deters intruders from intruding. As amended, Claim 1 now recites a log file protection 
system for protecting log files in which computer system operations have been recorded, 
including: log file creation means which create a plurality of identical log files which record the 
operations of the computer system; alteration detection means which periodically monitor the 
plurality of identical log files for alteration or deletion; and restoration means which restore an 
altered or deleted log file by replacing the altered or deleted log file with an unaltered log file 
from the plurality of identical log files when the altered or deleted log file is detected by the 
alteration detection means. 

The Shen and Falkner references, even if combined for the sake of argument, fail to teach 
or suggest the log file protection system of Claim 1 . In particular, Shen fails to teach or suggest 
restoration means which restore the altered or deleted log file by replacing the altered or deleted 
log file with an unaltered log file from the plurality of identical log files when the altered or 
deleted log file is detected by said alteration detection means. Rather, Shen teaches that "when 
any of the file designated by backup information setting unit 21 1 is modified, then a backup copy 
is always generated, and the generated backup copy will be managed by each generation." 
Col. 16, lines 34-38. The Shen backup copies are modified to avoid infection by, "for example, 
appending] an extension to the filename indicating the last modified date/time or the date/time 
when the backup copy was generated." Col. 16, lines 54-59. 

The Falkner reference fails to address the shortcomings of Shen. In that regard, Falkner 
merely describes "a method and apparatus for determining the size of a file cache on a client 
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computer coupled to a fileserver computer." Col. 1, lines 17-19. For these reasons, applicants 
submit that the cited references, either alone or in combination, fail to teach, suggest, provide 
any motivation to make, or otherwise render obvious the invention of presently amended 
independent Claim 1 . 

Claims 2-6 and 8-2 1 depend from Claim 1 and therefore are patentable for at least the 
reasons discussed above. However, each of Claims 2-6 and 8-21 recite further limitations that 
are neither taught nor suggested by the cited references of record, whether taken individually or 
in hypothetical combination. For example, the Shen and Falkner references fail to teach or 
suggest the following limitations: wherein the log file creation means create the plurality of 
identical log files in parallel using identical information, as claimed in dependent Claim 2; hiding 
means which hide all but one of the identical log files, as claimed in dependent Claims 3 and 10; 
wherein the hiding means periodically re-hide the hidden log files in different locations, as 
claimed in dependent Claims 4 and 14; wherein the hiding means re-hide the hidden log files in 
different locations when alteration or deletion is detected by the alteration detection means, as 
claimed in dependent Claims 5, 12, 16, and 20; and means which perform additional processing 
when an altered or deleted log file is detected by the alteration detection means, as claimed in 
dependent Claims 6, 8, 9, 1 1, 13, 15, 17-19, and 21. 

For at least these reasons, applicants respectfully submit that Claims 1-6 and 8-21 are 
patentable over the cited references of record. 

CONCLUSION 

In view of the above amendments and foregoing remarks, applicants assert that 
Claims 1-26 are now in condition for allowance. Accordingly, the outstanding rejections should 
be withdrawn and the application passed to allowance. 

/// 
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The Examiner is invited to call the undersigned with questions regarding the above at the 
telephone number listed below. 

Respectfully submitted, 

CHRISTENSEN O'CONNOR 
JOHNSON KINDNESS PLLC 

pes. 4-3. 1A-L 

n^tx. Jeffrey M.^Sakoi 

Direct Dial No. 206.695.1713 
E-Mail Address: jeff@cojk.com 

I hereby certify that this correspondence is being deposited with the U.S. Postal Service in a sealed 
envelope as first class mail with postage thereon fully prepaid and addressed to Mail Stop Amendment, 
Commissioner for Patents, P.O. Box 1450, Alexandria, VA 223 13-1450, on the below date. 

Date: Qo{f)VjiV Jfr, ^>OH ^ k a ^ i A 

JMS/ECP:cg 
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